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Abstract of JP4230139 

PURPOSE:To monitor the network and to 
keep the security among users with a unique 
system for each user. 
CONSTITUTION:Virtual view information 
generated uniquely by the user is defined for 
network monitor in addition to the network 
management having network management 
information based on actual network 
constitution and the virtual view information is 
linked to the actual network management 
information to allow each user to monitor the 
network through the virtual view information as 
the feature. 
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English Translation of Japanese Laid-Open Patent Application 
No. 4-230139 

[WHAT IS CLAIMED IS:] 

[Claim 1] A network management apparatus comprising a first 
table^ which is accessed by a user through one of network 
constituting apparatuses and has network management 
information including the arrangement information and status 
information of each of the network constituting apparatuses, 
characterized by further comprising a second table and a link 
means, wherein the second table has information for prescribing 
the range of the network constituting apparatuses monitored by 
each user and first virtual view information corresponding to 
the network management information of the network constituting 
apparatuses within the range, and link means links the first 
virtual view information to the network management information 
corresponding to the information at the time of access executed 
by a user. 

[Claim 2] A network management apparatus according to claim 
1, wherein the first table has status information of a group 
composed of a plurality of the network constituting apparatuses, 
the second table has second virtual view information 
corresponding to the status information of the group composed 
of the plurality of network constituting apparatuses, and the 
link means has a means for linking the second virtual view 
information to the status information corresponding to the 
above information at the time of access executed by a user. 
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[DETAILED DESCRIPTION OF THE INVENTION] 
[0001] 

[FIELD OF INDUSTRIAL APPLICATION] 

The present invention is used in a network system composed 
of a communication network, network constituting apparatuses, 
and a network management apparatus . In particular, the present 
invention relates to a network monitor means for monitoring the 
arrangement and the status of a network from the network 
management apparatus . 
[0002] 

[DESCRIPTION OF THE PRIOR ART] 

In conventional examples, information as to the 
arrangement and the status of network constituting apparatuses 
stored in a network management apparatus is monitored based on 
the arrangement of an actual network. For example, in a network 
shown in Fig. 2, respective users monitor the status of network 
constituting apparatuses used by them by a network management 
apparatus 11. Here, a user (1) uses a host (1) and terminals 
(1) and (2), a user (2) uses the host (1) and a terminal (3), 
and a user ( 3 ) uses the host ( 2 ) and terminals ( 4 ) and ( 5 ) . When 
network constituting apparatuses are used by only one user as 
the user (3 ) , the respective apparatuses can be monitored under 
the management of the user (3) . In contrast, in the apparatus 
such as the host (1) which is commonly used by a plurality of 
users, the users (1) and (2) are restricted or prohibited to 
monitor the apparatus, and the apparatus is monitored by a 
network managing person (super user). Accordingly, in the 
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network shown in Fig. 2, the monitoring range of the respective 
users is as shown in Fig. 6. Further, to monitor the network 
based on an actual network arrangement, a monitor function 
common to respective users and a restriction function in a range 
which can be restricted by the users are uniformly defined. 
[0003] 

[PROBLEMS TO BE SOLVED BY THE INVENTION] 

The conventional examples are disadvantageous in that 
users cannot help being restricted or prohibited to monitor 
network constituting apparatuses commonly used by a plurality 
of users to protect security between the users. 
[0004] 

Further, in the conventional examples, since the network 
constituting apparatuses are managed by the physical 
arrangement and the logical association thereof, it is 
impossible for each user to realize a specific monitoring system 
such as hierarchization of a network, selection of an apparatus 
to be monitored, and the like. 
[0005] 

An object of the present invention, which was made to 
eliminate the above drawbacks is to provide a network management 
apparatus which can maintain security while suppressing 
competition among users. 
[0006] 

[MEANS FOR SOLVING THE PROBLEMS] 

The present invention is a network management apparatus 
including a first table N which is accessed by a user through one 
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of network constituting apparatuses and has the network 
management information including the arrangement information 
and the status information of each of the network constituting 
apparatuses, wherein the network management apparatus further 
includes a second table and a link means, the second table having 
information for prescribing the range of the network 
constituting apparatuses monitored by each user and first 
virtual view information corresponding to the network 
management information of the network constituting apparatuses 
within the range, and link means linking the first virtual view 
information to the network management information 
corresponding to the information at the time of access executed 
by a user, 
[0007] 

It is preferable here that the first table have status 
information of a group composed of a plurality of the network 
constituting apparatuses, the second table have second virtual 
view information corresponding to the status information of the 
group composed of the plurality of network constituting 
apparatuses and that the link means have a means for linking 
the second virtual view information to the status information 
corresponding to the information. 
[0008] 
[OPERATION] 

When a network constituting apparatus is accessed, a 
virtual view uniquely created by a user is linked to the network 
management information of an actual network arrangement. With 
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the above arrangement, security can be protected among users 
without restricting or prohibiting for the users to monitor a 
network constituting apparatus common to the users. Further, 
a management method unique to the users can be set by 
segmentizing or hierarchizing the virtual view. 
[0009] 

[EMBODIMENT] 

An embodiment of the present invention will be explained 
with reference to drawings. Fig. 1 is a block diagram showing 
an arrangement of the embodiment, and Fig. 2 shows an 
arrangement of a network to which the embodiment is applied. 
As shown in Fig. 2, the embodiment is applied to a network 
composed of a network management apparatus 11, hosts 12 and 
terminals 13 connected to the network, an apparatus 14 for 
accessing to the network, and a communication medium 15 (phone 
network, and the like) for realizing the network. As shown in 
Fig. 1, the network management apparatus 11 includes a network 
management information table 1 as a first table which is 
accessed by a user through one of network constituting 
apparatuses each composed of hosts 12 and terminals 13 and has 
network management information including the arrangement 
information and the status information of each of the network 
constituting apparatuses . As means characteristic to the 
present invention, the virtual view information table as a 
second table has information for prescribing the range of the 
network constituting apparatuses monitored by each user and 
first virtual view information corresponding to the network 
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management information of the network constituting apparatuses 
within the range • The link means 3 links the first virtual view 
information to the network management information 
corresponding to the information at the time of access executed 
by a user. Furthermore, the first table may have status 
information of a group composed of a plurality of the network 
constituting apparatuses, the second table may have second 
virtual view information corresponding to the status 
information of the group composed of the plurality of network 
constituting apparatuses, and the link means 3 may have a means 
for linking the second virtual view information to the status 
information corresponding to the above information at the time 
of access executed by a user. 
[0010] 

Next, an operation of the embodiment will be explained. 
Each user monitors the network through the network management 
apparatus 11. As shown in Fig. 2, the network management 
apparatus 11 stores network management information 21 based on 
the actual arrangement of the network and virtual view 
information 22 uniquely created by users. The network 
management information 21 is composed of the arrangement 
information and the status information of hosts, terminals, and 
the like and stored as a database table of each arrangement 
apparatus. The virtual view information 22 includes the 
information of the network constituting apparatuses to be 
monitored by the users and the information for regulating the 
range which can be monitored and controlled by the users, and 
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the information is stored in a database as a table common to 
the respective network constituting apparatuses. Further , it 
is possible to define the virtual view information 22 for each 
user and to link it to the table of the network management 
information 21. That is, the same network constituting 
apparatus can be monitored from a plurality of virtual views 
likewise the host ( 1 ) of Fig. 2. Further, a monitor system in 
which an object to be monitored does not compete among users 
or among virtual views as well as security is maintained and 
can be realized by defining the range, in which the respective 
network constituting apparatuses are monitored and controlled, 
in the virtual view information. 
[0011] 

Next, Fig. 3 shows an example in which a plurality of 
virtual views are created in on one user. A view (1) monitors 
hosts (1) and (2), a view (2) monitors terminals (1), (2) and 
(3), and a view (3) monitors terminals (4) and (5). A view can 
be segmentalized within the range which can be monitored by 
users by defining the plurality of views, thereby a network 
monitor range can be designated to each manager of users. 
Further, it is possible to monitor the network constituting 
apparatuses under the control of a virtual view as one group 
by defining one virtual view and one network constituting 
apparatus. That is, as shown in Fig. 3, a user monitors the 
views (1), (2), and (3), and when it is desired to monitor the 
network constituting apparatus under the control of, for 
example, the view (1) because abnormality occurs in the network 
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constituting apparatus, the network constituting apparatus can 
be monitored by switching the virtual view from a user view to 
the view ( 1 ) . 

[0012] 

Fig. 4 shows an example in which a virtual view is 
hierarchized. A view (4) is added between the user view and 
the views (2) and (3) in the example shown in Fig. 3, thereby 
the views (1) and (4) are controlled by the user view, and the 
views ( 2 ) and ( 3 ) are controlled by the view ( 4 ) . With the above 
arrangement, the view (1) monitors hosts, the view (4) monitors 
terminals , and further the view ( 2 ) monitors the terminals under 
the control of the host (1), and the view (3) controls the 
terminals under the control of the host (2 ) . As described above, 
the range monitored and controlled by the respective virtual 
views can be variously prescribed by hierarchizing the virtual 
views . 
[0013] 

[EFFECT OF THE INVENTION] 

According to the present invention, the virtual view 
information uniquely created by the users is linked to the 
network management information based on the actual arrangement 
of the network, as described above. Therefore, there is an 
effect that a network can be monitored while maintaining 
security without competition among users . 
[0014] 

There is also an effect that a network can be monitored 
by being segmentized by sengmentizing the virtual views in the 
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users . 
[0015] 

Further, the virtual views themselves, which have the 
network constituting apparatuses under the control of them, can 
be monitored by hierarchizing the virtual views. Accordingly, 
there is an effect that many portions of a network can be 
monitored by a smaller number of apparatuses. 
[BRIEF DESCRIPTION OF THE DRAWINGS] 

Fig. 1 is a block diagram showing an arrangement of an 
embodiment of the present invention. 

Fig. 2 is a conf igurational view of a network to which 
the embodiment of the present invention is applied. 

Fig. 3 shows an example in which network management 
information corresponds to virtual view information on a table 
of the embodiment of the present invention. 

Fig. 4 shows an example in which network management 
information corresponds to virtual view information on a table 
of the embodiment of the present invention. 

Fig. 5 shows an example of virtual view information on 
a table of the embodiment of the present invention. 

Fig. 6 shows an example of network management information 
on a table of a conventional example. 
[DESCRIPTION OF REFERENCE NUMERALS] 

1 network management information table 

2 virtual view information table 

3 link means 

11 network management apparatus 
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12 Host 

13 terminal 

14 apparatus for accessing to the network 

15 communication medium 

21 network management information 

22 virtual view information 
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Fig. 1 

1/ NETWORK MANAGEMENT INFORMATION TABLE 
2/ VIRTUAL VIEW INFORMATION TABLE 
3/ LINK MEANS 

Fig. 2 

11/ NETWORK MANAGEMENT APPARATUS 

12/ HOST (1) 

13/ TERMINAL (1) 

Fig. 3 

21/ NETWORK MANAGWEMENT INFORMATION 

23/ HOST (1) VIRTUAL VIEW 

HOST (1) INFORMATION 

TERMINAL (1) INFORMATION 

TERMINAL (1) VIRTUAL VIEW 

USER (1) VIEW 

Fig. 4 

NETWORK MANAGEMENT INFORMATION 
HOST (1) INFORMATION 
TERMINAL ( 1 ) INFORMATION 
HOST (1) VIRTUAL VIEW 
TERMINAL (1) VIRTUAL VIEW 
VIEW (1) 

Fig. 5 
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USER VIEW 

VIEW (1) 

HOST (1) VIEW 

TERMINAL (1) VIEW 

HOST (1) INFORMATION 

TERMINAL (1) INFORMATION 

NETWORK MANAGEMENT INFORMATION 

Fig. 6 

HOST (1) INFORMATION 
TERMINAL ( 1 ) INFORMATION 
MONITOR RANGE OF USER (1) 
NETWORK MANAGEMENT INFORMATION 
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